public inbox for libc-alpha@sourceware.org
 help / color / mirror / Atom feed
From: Samuel Thibault <samuel.thibault@aquilenet.fr>
To: Siddhesh Poyarekar <siddhesh@sourceware.org>
Cc: libc-alpha@sourceware.org, joseph@codesourcery.com
Subject: Re: [PATCH] tst-realpath-toolong: Fix hurd build
Date: Sun, 23 Jan 2022 16:33:47 +0100	[thread overview]
Message-ID: <20220123153347.yptrgfkmumhcdv7j@begin> (raw)
In-Reply-To: <2be97fb0-751d-1361-518a-24c131b49a51@sourceware.org>

Siddhesh Poyarekar, le dim. 23 janv. 2022 20:49:48 +0530, a ecrit:
> On 23/01/2022 06:06, Samuel Thibault wrote:
> > Siddhesh Poyarekar via Libc-alpha, le sam. 22 janv. 2022 20:15:23 +0530, a ecrit:
> > > We don't really need a bigger buffer for realpath since it should fail
> > > and return NULL.  In the bug too, the buffer itself is not accessed; it
> > > is in fact left untouched.  Drop the PATH_MAX use and pass a single char
> > > address.
> > 
> > ? realpath assumes that the passed buffer is PATH_MAX-long. When
> > PATH_MAX is not defined, calling it with a buffer is essentially
> > undefined. Better just pass NULL.
> 
> Passing NULL doesn't reproduce the problem because realpath just allocates
> enough to accommodate the return, even when it exceeds PATH_MAX.

Ah, ok, sorry I didn't check the whole story.

> Would you prefer it if I defined PATH_MAX on hurd then, something like:
> 
> #ifndef PATH_MAX
> # define PATH_MAX 1024
> #endif
> 
> or do you prefer a more accurate path_max value using pathconf()?

Better use the accurate from pathconf() ; that being said it will return
-1 on the ext2fs filesystem, so we'll have to resort to a hardcoded
limit in that case anyway. I'm fine with just setting PATH_MAX by hand
here.

Samuel

  reply	other threads:[~2022-01-23 15:36 UTC|newest]

Thread overview: 36+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-01-19  8:21 [PATCH v2 0/3] Fixes for CVE-2021-3998 and CVE-2021-3999 Siddhesh Poyarekar
2022-01-19  8:21 ` [PATCH v2 1/3] support: Add helpers to create paths longer than PATH_MAX Siddhesh Poyarekar
2022-01-19 10:13   ` Siddhesh Poyarekar
2022-01-20 14:47     ` Cristian Rodríguez
2022-01-20 14:56       ` Florian Weimer
2022-01-20 15:17         ` Cristian Rodríguez
2022-01-20 14:57       ` Siddhesh Poyarekar
2022-01-19  8:21 ` [PATCH v2 2/3] realpath: Set errno to ENAMETOOLONG for result larger than PATH_MAX (CVE-2021-3998) Siddhesh Poyarekar
2022-01-19  8:21 ` [PATCH v2 3/3] getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999) Siddhesh Poyarekar
2022-01-20  9:32 ` [PATCH v3 0/3] Fixes for CVE-2021-3998 and CVE-2021-3999 Siddhesh Poyarekar
2022-01-20  9:32   ` [PATCH v3 1/3] support: Add helpers to create paths longer than PATH_MAX Siddhesh Poyarekar
2022-01-21 16:27     ` Adhemerval Zanella
2022-01-20  9:32   ` [PATCH v3 2/3] realpath: Set errno to ENAMETOOLONG for result larger than PATH_MAX [BZ #28770] Siddhesh Poyarekar
2022-01-21 23:22     ` Joseph Myers
2022-01-22  3:47       ` Siddhesh Poyarekar
2022-01-22 14:45       ` [PATCH] tst-realpath-toolong: Fix hurd build Siddhesh Poyarekar
2022-01-23  0:36         ` Samuel Thibault
2022-01-23 15:19           ` Siddhesh Poyarekar
2022-01-23 15:33             ` Samuel Thibault [this message]
2022-01-24  6:00               ` [committed v2] " Siddhesh Poyarekar
2022-01-24 13:45     ` [PATCH v3 2/3] realpath: Set errno to ENAMETOOLONG for result larger than PATH_MAX [BZ #28770] Andreas Schwab
2022-01-24 14:25       ` Siddhesh Poyarekar
2022-01-24 14:48         ` Andreas Schwab
2022-01-24 14:59           ` Siddhesh Poyarekar
2022-01-24 15:28             ` Andreas Schwab
2022-01-24 16:08               ` [committed] realpath: Avoid overwriting preexisting error (CVE-2021-3998) Siddhesh Poyarekar
2022-01-20  9:32   ` [PATCH v3 3/3] getcwd: Set errno to ERANGE for size == 1 (CVE-2021-3999) Siddhesh Poyarekar
2022-01-20 13:32     ` Andreas Schwab
2022-01-21 16:41     ` Adhemerval Zanella
2022-01-21 17:26       ` Siddhesh Poyarekar
2022-01-21 17:31         ` Adhemerval Zanella
2022-01-21 17:38       ` [PATCH v4] " Siddhesh Poyarekar
2022-01-21 17:59         ` Andreas Schwab
2022-01-21 18:02           ` Siddhesh Poyarekar
2022-01-21 18:04       ` [PATCH v5] " Siddhesh Poyarekar
2022-01-24  6:03         ` Siddhesh Poyarekar

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20220123153347.yptrgfkmumhcdv7j@begin \
    --to=samuel.thibault@aquilenet.fr \
    --cc=joseph@codesourcery.com \
    --cc=libc-alpha@sourceware.org \
    --cc=siddhesh@sourceware.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).